Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20220812-en
General
-
Target
1.exe
-
Size
36KB
-
MD5
c6063d279b89fd1ef113deed8a1b8b14
-
SHA1
4714e79de9e889fdfa3b937a414f23fa0c8166bc
-
SHA256
35216ba794011f90cb69ff4d49c26032ec4970f837c1de9af0564196ad5a80c8
-
SHA512
7e93340949fe0a1919fe95e47d8399df265a89692c41bd8bbfc39bb20b5e2ed1e845ceb01cb619fe2c5c3b7a7603ed0f48000268f7786f6d846c67fbc5c5eedc
-
SSDEEP
768:sX0mvrQFZiRigW3BeBPkgkqMptgYToDWzbxDs:sXBrCGigWxaOmiHhs
Malware Config
Signatures
Files
-
1.exe.exe windows x86
50f2914c55696a01c19cbfb70bca752f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
WaitForSingleObject
GetVersionExA
GetCurrentProcess
GetModuleHandleA
CopyFileA
GetLastError
HeapAlloc
GetProcessHeap
VirtualProtect
HeapFree
SetEvent
CreateEventA
lstrcmpiA
GetStartupInfoA
GetLocalTime
lstrlenA
CreateFileA
WriteFile
lstrcatA
GetTickCount
LocalAlloc
LocalSize
LocalFree
lstrcpyA
Sleep
InterlockedExchange
VirtualAlloc
VirtualFree
GlobalMemoryStatusEx
user32
wsprintfA
advapi32
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
RegCloseKey
CloseServiceHandle
OpenEventLogA
ClearEventLogA
CloseEventLog
StartServiceCtrlDispatcherA
msvcrt
fclose
??3@YAXPAX@Z
memcpy
ceil
_ftol
__CxxFrameHandler
_CxxThrowException
memset
??2@YAPAXI@Z
memcmp
strlen
strstr
strcpy
strncpy
strrchr
atoi
strcspn
rand
sprintf
realloc
free
_beginthreadex
_except_handler3
_stricmp
fprintf
fopen
strchr
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strupr
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE